CVE-2024-51224 - Vulnerability Analysis

Overview

Phpgurukul Vehicle Record Management System v1.0 contains multiple stored XSS vulnerabilities caused by improper input sanitization in /admin/edit-vehicle.php parameters, letting attackers execute arbitrary scripts via crafted payloads, exploit requires no special privileges.

Severity & Score

Impact

Attackers can execute arbitrary scripts in users' browsers, potentially stealing session data or performing actions on behalf of users.

Mitigation

Update to the latest version with proper input sanitization and output encoding.

References

• https://github.com/Buckdray/vulnerability-research
• https://github.com/Buckdray/vulnerability-research/tree/main/CVE-2024-51224

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner